Behavioral task
behavioral1
Sample
009f8928b2e3dbdaec6c166e820445d0.exe
Resource
win7-20220718-en
Behavioral task
behavioral2
Sample
009f8928b2e3dbdaec6c166e820445d0.exe
Resource
win10v2004-20220721-en
General
-
Target
009f8928b2e3dbdaec6c166e820445d0.exe
-
Size
37KB
-
MD5
009f8928b2e3dbdaec6c166e820445d0
-
SHA1
ed3b5e68ab721ab7c7d6417c335fd85d3d2a1315
-
SHA256
952f0f0f9b522fd3b8f764d5a84cf23c7cfcf412eb5bce8ba48fae3e19887047
-
SHA512
3bdbb4f199e22c4b18d3533da23bfa2d1e8b3c25d7a2014e1e7cc73b860abee85083a4c047fdc48d2e1fa8cc5bdab24277bd5a3288c72629d700befcf8256506
-
SSDEEP
384:lmGcaCis5/WRdL5kyc/7SHlRng8bOh+prAF+rMRTyN/0L+EcoinblneHQM3epzXH:gGceD5nc/7SP9OGrM+rMRa8NuVpt
Malware Config
Extracted
njrat
im523
HacKed
eidnafa522.ddns.net:5552
4a7bbceff6cedc909e9ef3cb6a805541
-
reg_key
4a7bbceff6cedc909e9ef3cb6a805541
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
009f8928b2e3dbdaec6c166e820445d0.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 35KB - Virtual size: 34KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ